Security

Well, here's a nice little gem for the festive season. I like it for a few distinct reasons: It's one of those cases where if you lo...

[Aside: I'm not sure anyone cares, particularly because the "block third party cookies" option tends to break legitimate web s...

I've been meaning to fiddle around with timing attacks for a while. I've had various discussions in the past about the significance ...

Just a quick note that I released vsftpd-2.2.2. Most significantly, a regression was fixed in the inbuilt listener. Heavily loaded sites cou...

Recently, I've been getting pretty behind on executing my various research ideas. The only sane thing to do is blog the idea in case som...

It was great to talk to so many people about Chromium security at HITB Malaysia. I was quite amused to be at a security conference and have ...

Nothing too exciting, just two regressions fixed: "pasv_address" should work again, and SSL data connections should no longer fail...